CVE-2015-2733
Fixed in a distro release EPSS 6%
Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.
Products: mozilla firefox, oracle solaris, mozilla firefox_esr, novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | firefox | 0:38.1.0-1.el5_11 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:38.1.0-1.el5_11 |
| Red Hat Enterprise Linux 6 | firefox | 0:38.1.0-1.el6_6 |
| Red Hat Enterprise Linux 6 | firefox-debuginfo | 0:38.1.0-1.el6_6 |
| Red Hat Enterprise Linux 7 | firefox | 0:38.1.0-1.el7_1 |
| Red Hat Enterprise Linux 7 | firefox-debuginfo | 0:38.1.0-1.el7_1 |
| SUSE Linux Enterprise Desktop 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Desktop 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Desktop 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Desktop 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP1-LTSS | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP1-TERADATA | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox | 38.2.0esr-10.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | MozillaFirefox-branding-SLED | 31.0-0.5.7.11 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | firefox-gcc47 | 4.7.2_20130108-0.37.2 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | mozilla-nss | 3.19.2.0-0.7.1 |
| SUSE Linux Enterprise Server 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Server 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Server 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | MozillaFirefox | 31.8.0esr-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nspr | 4.10.8-0.5.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mozilla-nss | 3.19.2_CKBI_1.98-0.10.1 |
| SUSE Linux Enterprise Software Development Kit 12 | MozillaFirefox | 31.8.0esr-37.3 |
| SUSE Linux Enterprise Software Development Kit 12 | mozilla-nspr | 4.10.8-3.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mozilla-nss | 3.19.2_CKBI_1.98-21.1 |
| Ubuntu 14.04 LTS | firefox | 39.0+build5-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 |